logoalt Hacker News

denisinvaderyesterday at 8:58 PM2 repliesview on HN

hash part of url only available in the browser, as far as I know, server doesn’t have access to # value


Replies

jamesdwilsonyesterday at 9:52 PM

very easy for the server to intentionally (or by compromise) add a one liner to send the hash text up.

sublinearyesterday at 9:08 PM

Typos and URL mangles are common though, and I'd still have no way to confirm if it got logged in that case. It's out of scope for anything in the github source, and instead depends on the server hosting the page. I know this isn't meant to be super secure, but it's still worth a mention.

show 1 reply